none
Getting a Vista Not Genuine message but have a different angle

    Question

  • I had that dreaded FBI Virus/Malware thing happen when I clicked on an unfamiliar site. The only way I could rid this system of it was to remove the boot drive, connect via USB to SATA adapter and scan and delete the malicious files. When I reinstalled the "cleaned" drive back in my system, I got the "Not Genuine" message.

    This system was purchased in '09 off the shelf at Best Buy and I also bought the Vista Ultimate upgrade. I did the Ultimate upgrade immediately and this computer's hardware has never been changed in any way shape or form. Yet, when I called MS. they didn't want to hear it. It's a bit disconcerting that I was the loudest anti-piracy voice in my peer group and now I'm a criminal.

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->
    Validation Status: Invalid License
    Validation Code: 50
    Cached Online Validation Code: 0xc004c4a8
    Windows Product Key: *****-*****-MTQK9-8QXYH-YF7QX
    Windows Product Key Hash: MI1aab657mslGkyv4vD/ocNMTj4=
    Windows Product ID: 89587-495-4861153-71603
    Windows Product ID Type: 5
    Windows License Type: Retail
    Windows OS version: 6.0.6002.2.00010100.2.0.001
    ID: {790F2486-CFC5-46D4-B018-7334653557DC}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: Registered, 1.9.42.0
    Signed By: Microsoft
    Product Name: Windows Vista (TM) Ultimate
    Architecture: 0x00000009
    Build lab: 6002.vistasp2_gdr.120824-0336
    TTS Error: T:20130122172354281-
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 114 Blocked VLK 2
    Microsoft Office XP Professional with FrontPage - 114 Blocked VLK 2
    Microsoft Office Enterprise 2007 - 103 Blocked VLK
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{790F2486-CFC5-46D4-B018-7334653557DC}</UGUID><Version>1.9.0027.0</Version><OS>6.0.6002.2.00010100.2.0.001</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-YF7QX</PKey><PID>89587-495-4861153-71603</PID><PIDType>5</PIDType><SID>S-1-5-21-3754337975-1685379538-2517687335</SID><SYSTEM><Manufacturer>Gateway</Manufacturer><Model>LX6810-01</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>R01-A1C0</Version><SMBIOSVersion major="2" minor="5"/><Date>20090717000000.000000+000</Date></BIOS><HWID>3E503D07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>ACRSYS</OEMID><OEMTableID>ACRPRDCT</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>114</Result><Products><Product GUID="{90280409-6000-11D3-8CFE-0050048383C9}"><LegitResult>114</LegitResult><Name>Microsoft Office XP Professional with FrontPage</Name><Ver>10</Ver><Val>39476F84C4B4004</Val><Hash>4iCnywwNW1w4s9ukTIwGMGxyGic=</Hash><Pid>54185-640-0000025-17153</Pid><PidType>14</PidType></Product><Product GUID="{90120000-0030-0000-0000-0000000FF1CE}"><LegitResult>103</LegitResult><Name>Microsoft Office Enterprise 2007</Name><Ver>12</Ver><Val>ACD7202654E586</Val><Hash>fFic3JgCreGGRxyF8uMWB4R4Jcg=</Hash><Pid>89388-707-1528066-65519</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="10" Result="114"/><App Id="16" Version="10" Result="114"/><App Id="17" Version="10" Result="114"/><App Id="18" Version="10" Result="114"/><App Id="1A" Version="10" Result="114"/><App Id="1B" Version="10" Result="114"/><App Id="15" Version="12" Result="103"/><App Id="16" Version="12" Result="103"/><App Id="18" Version="12" Result="103"/><App Id="19" Version="12" Result="103"/><App Id="1A" Version="12" Result="103"/><App Id="1B" Version="12" Result="103"/><App Id="44" Version="12" Result="103"/><App Id="A1" Version="12" Result="103"/><App Id="BA" Version="12" Result="103"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.0.6002.18005
    Name: Windows(TM) Vista, Ultimate edition
    Description: Windows Operating System - Vista, RETAIL channel
    Activation ID: 30fab9cc-8614-4339-989f-7ce61fb7a5c4
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 89587-00142-495-486115-00-1033-6002.0000-0222013
    Installation ID: 010516976873247886300740119235519334979912153172133270
    Processor Certificate U: 43473 
    Machine Certificate U: 43474
    Use License U: 43476
    Product Key Certificate U: 43475

    Partial Product Key: YF7QX
    License Status: Unlicensed

    Windows Activation Technologies-->
    N/A

    HWID Data-->
    HWID Hash Current: MgAAAAEAAAABAAEABAACAAAAAQABAAEAln36tHx0fLFkW5K8Rgvy9PAioBfADV4dTFg=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20000
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   ACRSYS  APIC1138
      FACP   ACRSYS  FACP1138
      HPET   ACRSYS  OEMHPET0
      MCFG   ACRSYS  OEMMCFG
      WDRT   ACRSYS  NV-WDRT
      SLIC   ACRSYS  ACRPRDCT
      OEMB   ACRSYS  OEMB1138
      NVHD   ACRSYS  NVHDCP
      AWMI   ACRSYS  OEMB1138
      SSDT   DpgPmm  CpuPm

    ******************************************************************************************

    Note that I did the store reset as was listed in another post but it didn't fly for me.

    Any help would be greatly appreciated. Thanks in advance....

    Wednesday, January 23, 2013 12:47 PM

Answers

  • Note that your installation of Office is counterfeit!

    Your problem with Windows may be fairly simple - please open an Elevated Command Prompt, and run the following commands, and post the results...

    DIR C:\Windows\System32\7b*.*

    DIR C:\Windows\System32\7b*.* /AH

    ICACLS C:\Windows\System32\7b*.*

    ATTRIB C:\Windows\System32\7b*.*

    When you tried the store rebuild, did you enter the Key from your COA sticker? - because if so, it's not showing in your report.

    The Key in the report is a Retail Key - which probably means that it's an AnyTime Upgrade key.

    Unless we can solve this, you'll have to do a Recovery to the ex-factory state, and then re-apply the Upgrade (if MS can't/won't use an override)

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Wednesday, January 23, 2013 2:51 PM
    Moderator

All replies

  • Note that your installation of Office is counterfeit!

    Your problem with Windows may be fairly simple - please open an Elevated Command Prompt, and run the following commands, and post the results...

    DIR C:\Windows\System32\7b*.*

    DIR C:\Windows\System32\7b*.* /AH

    ICACLS C:\Windows\System32\7b*.*

    ATTRIB C:\Windows\System32\7b*.*

    When you tried the store rebuild, did you enter the Key from your COA sticker? - because if so, it's not showing in your report.

    The Key in the report is a Retail Key - which probably means that it's an AnyTime Upgrade key.

    Unless we can solve this, you'll have to do a Recovery to the ex-factory state, and then re-apply the Upgrade (if MS can't/won't use an override)

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.


    Wednesday, January 23, 2013 2:51 PM
    Moderator

  • C:\Documents and Settings\admin\My Documents\Downloads>vc.bat

    C:\Documents and Settings\admin\My Documents\Downloads>DIR G:\Windows\System32\7
    b*.*
     Volume in drive G is C-Vista
     Volume Serial Number is 564C-CF2D

     Directory of G:\Windows\System32

    File Not Found

    C:\Documents and Settings\admin\My Documents\Downloads>DIR G:\Windows\System32\7
    b*.* /AH
     Volume in drive G is C-Vista
     Volume Serial Number is 564C-CF2D

     Directory of G:\Windows\System32

    2013-01-23  07:43 PM             3,200 7B296FB0-376B-497e-B012-9C450E1B7327-2P-0
    .C7483456-A289-439d-8115-601632D005A0
    2013-01-23  07:43 PM             3,200 7B296FB0-376B-497e-B012-9C450E1B7327-2P-1
    .C7483456-A289-439d-8115-601632D005A0
                   2 File(s)          6,400 bytes
                   0 Dir(s)  545,943,052,288 bytes free

    C:\Documents and Settings\admin\My Documents\Downloads>CACLS G:\Windows\System32
    \7b*.*
    G:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:F

                       BUILTIN\Administrators:F

                       BUILTIN\Users:R

    G:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d
    -8115-601632D005A0 NT AUTHORITY\SYSTEM:F

                       BUILTIN\Administrators:F

                       BUILTIN\Users:R


    C:\Documents and Settings\admin\My Documents\Downloads>ATTRIB G:\Windows\System3
    2\7b*.*
    A   H      G:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C748345
    6-A289-439d-8115-601632D005A0
    A   H      G:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C748345
    6-A289-439d-8115-601632D005A0
    C:\Documents and Settings\admin\My Documents\Downloads>

    Thursday, January 24, 2013 1:47 AM
  • What on earth is going on there?

    You appear to be running from an XP environment?? Why?

    ( the results are the expected ones - but the drive assignments are all to pot)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    No - I do not work for Microsoft, or any of its contractors.

    Thursday, January 24, 2013 1:55 AM
    Moderator